CVE-2010-0886
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for...
CVE-2010-0886 is a high vulnerability (CVSS 10.0) in Sun Jdk, published April 20, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 69.9%, the 99th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 69.9%EPSS, 99th percentile
- Exploitation
- None known5 public exploits
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el4 | 1:1.6.0.20-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el4 | 1:1.6.0.20-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el4 | 1:1.6.0.20-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el4 | 1:1.6.0.20-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el4 | 1:1.6.0.20-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el4 | 1:1.6.0.20-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
Show 8 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs | before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Java Deployment Toolkit - Performs Insufficient Validation of Parameters | 2010-04-09 |
| Exploit-DB | JAVA Web Start - Arbitrary Command-Line Injection | 2010-04-09 |
| Exploit-DB | Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit) | 2010-04-09 |
| Metasploit | Sun Java Web Start Plugin Command Line Argument Injection | 2010-04-09 |
| Exploit-DB | Sun Java - Web Start Plugin Command Line Argument Injection (Metasploit) | 2010-09-21 |
What each source reports
NVD Score used
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
- Record
CVE-2010-0886- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
- Record
CVE-2010-0886- Updated
- 2026-11-02
EUVDEUVD-2010-0911No score
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
- Record
EUVD-2010-0911- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8wr7-r8m6-cw65No score
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for...
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
- Record
GHSA-8wr7-r8m6-cw65- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.apple.com/archives/security-announce/2010//May/msg00001.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14216
marc.info?l=bugtraq&m=134254866602253&w=2
secunia.com/advisories/39819
sunsolve.sun.com/search/document.do?assetkey=1-66-279590-1
Show 19 moreShow less
support.apple.com/kb/HT4170
vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
oracle.com/technology/deploy/security/alerts/alert-cve-2010-0886.html
securityfocus.com/archive/1/516397/100/0/threaded
vupen.com/english/advisories/2010/1191
nvd.nist.gov/vuln/detail/CVE-2010-0886
github.com/advisories/GHSA-8wr7-r8m6-cw65
access.redhat.com/errata/RHSA-2010:0356
bugzilla.redhat.com/show_bug.cgi?id=581237
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0356.json
cve.org/CVERecord?id=CVE-2010-0886